How we protect manuscripts

Private storage, not public media

BetaQuill stores manuscript uploads in a private location configured outside the public WordPress installation. Files use internal storage keys rather than public media-library URLs, and the storage directory is protected against direct web access.

Validation and quarantine

Uploads are limited to PDF and EPUB files up to 25 MB. BetaQuill checks the file contents and structure rather than trusting the filename, calculates a SHA-256 integrity fingerprint, and places every accepted upload into quarantine by default.

Malware checks fail closed

The current on-host scanner pilot is enabled only after its compatibility checks pass. A missing scanner, changed file, failed scan or inconclusive result leaves the manuscript quarantined. Antivirus reduces risk but cannot guarantee that every malicious file will be detected.

Workspace separation and revocation

Author and reader permissions are checked against the relevant workspace and campaign rather than a global WordPress role. Authors can remove a reader from a campaign and the action is recorded. Reader manuscript downloads are not enabled in the present release.

What is not claimed yet

BetaQuill does not currently claim DRM, invisible fingerprinting or leak tracing. Those features will not be advertised unless they become operational and are independently tested.